$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/04a34ce3-dd89-4dc8-af98-17645f710d46.roa File: 04a34ce3-dd89-4dc8-af98-17645f710d46.roa (raw, json) Hash identifier: EMaPhhlO7YH0/7eK/4oJOzmFG/oZDoYoznmFZeFu9nQ= Subject key identifier: 29:95:5B:85:2E:7F:1B:50:1E:21:7E:34:CE:E6:0E:4A:A8:88:F0:FE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5365A76360BC0624FFF5F454E8BF12D79D5808F1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/04a34ce3-dd89-4dc8-af98-17645f710d46.roa Signing time: Tue 10 Jun 2025 00:51:13 +0000 ROA not before: Tue 10 Jun 2025 00:51:13 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:8880::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:65:a7:63:60:bc:06:24:ff:f5:f4:54:e8:bf:12:d7:9d:58:08:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:51:13 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=3de91cb3963b7ec6b0b0126158228b176ac908f773cf8b6a7cad92dc4d7bbe44, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:39:a8:25:6a:17:a7:1b:07:4c:13:5b:8f:92: 44:23:80:e8:1e:fb:84:f4:11:c6:02:b2:95:f8:ff: 0d:9b:3e:30:72:41:17:d7:b0:5d:47:e0:e4:f0:b3: bb:b9:ad:1d:4e:0b:bd:b3:94:52:a3:c6:20:1f:a1: 3a:47:22:06:63:6c:e2:0f:02:1f:58:a0:1f:fc:61: f5:bc:3d:db:33:82:e4:04:9e:d7:d5:a6:1c:30:09: 6f:a7:9d:b5:d1:ac:60:0a:cc:8a:ee:f7:4f:7a:18: ae:7b:4d:65:e4:2c:6b:61:df:df:9a:eb:fa:da:34: 0c:ad:d5:8d:9c:18:5a:7a:9c:b2:42:05:63:56:53: 0f:80:2d:b5:a6:fb:c5:49:ad:59:7d:3f:95:40:a3: 95:2c:e1:73:59:7a:e9:d6:26:50:0a:30:8e:9d:41: 84:ea:88:06:9d:c8:9d:5c:73:70:ee:2e:03:04:4f: 56:81:0b:65:33:da:04:fe:67:69:c5:09:46:df:b9: 56:25:49:47:97:c8:39:01:9e:24:3d:0c:46:cd:d0: 63:2b:7d:e3:71:e2:26:ec:b7:e6:5c:68:ef:d2:65: 7a:fc:fc:a2:b6:57:1c:a4:c7:39:eb:37:57:cb:13: ce:fe:4e:f4:cc:be:9a:6f:15:a9:22:5d:b1:b6:11: 38:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:95:5B:85:2E:7F:1B:50:1E:21:7E:34:CE:E6:0E:4A:A8:88:F0:FE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/04a34ce3-dd89-4dc8-af98-17645f710d46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:8880::/46 Signature Algorithm: sha256WithRSAEncryption 5e:c1:17:be:cb:42:d4:16:91:8a:a1:c7:0c:9b:55:c3:d8:ca: 08:42:04:68:56:55:79:ea:91:e6:f4:d6:43:8c:81:16:07:6b: b6:54:75:d9:3a:25:48:b2:18:13:66:be:da:1e:60:56:e9:67: 39:44:df:60:ba:4e:ce:ff:ae:98:2c:1d:75:cf:42:f7:ab:9d: 3b:f5:22:d7:37:61:62:fb:89:1d:a0:86:73:73:e5:7d:ef:fb: 5e:1c:bd:c8:b8:d7:54:60:88:18:6f:26:fc:25:a5:5f:7a:e8: 51:13:a0:13:0c:18:cc:f4:5e:14:8c:88:72:05:84:df:57:07: 2b:79:65:b9:f1:9e:c3:d3:73:95:5e:d2:ce:bb:d7:83:28:37: 11:a8:d1:fa:6c:e5:19:f1:0c:f0:21:40:b6:97:8b:7a:db:ff: e0:6a:8f:90:07:a1:d5:3e:47:fd:02:69:e2:f6:b4:d6:19:99: 62:3e:e1:c3:5e:65:6d:bf:33:81:c1:b7:34:04:95:21:21:7b: af:3a:27:86:03:94:7b:c0:ca:d5:e2:b9:23:c8:d8:50:92:a4: 10:ff:4e:c3:15:13:12:a9:7f:a3:67:92:50:61:b0:77:85:00: d5:eb:28:cd:ba:2d:92:00:48:db:56:ca:93:69:86:d4:98:8f: 91:a2:e4:aa -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUU2WnY2C8BiT/9fRU6L8S151YCPEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwNTExM1oX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAM2RlOTFjYjM5NjNiN2VjNmIwYjAx MjYxNTgyMjhiMTc2YWM5MDhmNzczY2Y4YjZhN2NhZDkyZGM0ZDdiYmU0NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TmoJWoXpxsHTBNbj5JEI4DoHvuE 9BHGArKV+P8Nmz4wckEX17BdR+Dk8LO7ua0dTgu9s5RSo8YgH6E6RyIGY2ziDwIf WKAf/GH1vD3bM4LkBJ7X1aYcMAlvp5210axgCsyK7vdPehiue01l5CxrYd/fmuv6 2jQMrdWNnBhaepyyQgVjVlMPgC21pvvFSa1ZfT+VQKOVLOFzWXrp1iZQCjCOnUGE 6ogGncidXHNw7i4DBE9WgQtlM9oE/mdpxQlG37lWJUlHl8g5AZ4kPQxGzdBjK33j ceIm7LfmXGjv0mV6/PyitlccpMc56zdXyxPO/k70zL6abxWpIl2xthE4mwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCmVW4UufxtQHiF+NM7mDkqoiPD+MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA0YTM0Y2UzLWRkODktNGRjOC1hZjk4LTE3NjQ1ZjcxMGQ0Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba94iAMA0GCSqGSIb3DQEBCwUAA4IBAQBewRe+y0LUFpGKoccM m1XD2MoIQgRoVlV56pHm9NZDjIEWB2u2VHXZOiVIshgTZr7aHmBW6Wc5RN9guk7O /66YLB11z0L3q5079SLXN2Fi+4kdoIZzc+V97/teHL3IuNdUYIgYbyb8JaVfeuhR E6ATDBjM9F4UjIhyBYTfVwcreWW58Z7D03OVXtLOu9eDKDcRqNH6bOUZ8QzwIUC2 l4t62//gao+QB6HVPkf9Amni9rTWGZliPuHDXmVtvzOBwbc0BJUhIXuvOieGA5R7 wMrV4rkjyNhQkqQQ/07DFRMSqX+jZ5JQYbB3hQDV6yjNui2SAEjbVsqTaYbUmI+R ouSq -----END CERTIFICATE-----Generated at Sat Jun 14 06:27:10 2025 by rpki-client